v4 IDS killing internet connection

19. 3. 2009 22:35:54 detected similar IP on network 192.168.1.1 192.168.1.2 ARP


first is my router, second is my pc - why the hell ARP?

 

with firewall module 1045 - internet was blocked right after the start, after cca 1 hour and few refresh of network adapter settings is now net online. how long?

 

Interesting, I had 1045 at my last post here, shut PC down and have just rebooted and I now have firewall module 1043 (20081111).

Yup just checked the file has been overwritten, I downloaded at 4:51 am and installed by 5:00 am the modifed time is now showing as 7:52 am, along with all the other module updates.

Having said that, I have had no problems with internet access so far.


Colin

 

With test mode on or off?

 

Good question, I did disable test mode, but can't recall if it was before or after manually installing the module. Pretty sure I disabled it before the install.

Colin

 

Internet runs without dropouts so far with 1045.

I had some problems this morning because my VPN connection together with normal Internet surfing was slowing down. I had to disable QOS in the network options and now all is well.

Forellenblau

 

1045 with disabled ARP poisoning detection works few hours without interruption. only problem is that after restart PC i must disable and enable my network controller.

ARP must be disabled, because when I enable it, connection is gone. attacking adress is my own firewall

 

Looks like progress is being made, but there are still a few bugs by the looks of it.

 

Clearly there's an issue. I inquired about this not long ago and got no where. Hell I even exchanged my router as I wasn't certain where the problem is and v4 still causes this problem. Today I simply lost connection but the other to PCs are running v3 with no issues. Plus the PC running v4 has no shared access to the other PCs even though it's setup correctly. This is frustrating!

I decided to use a tool to restore the registry that I booted with this a.m. and got back on. So apparently their is an issue with the firewall module. How do you tell which version you are using?

I'm running XP Pro SP3.

I have v4.0.226. I see a later version is on Eset's web site. Does this have the fix or is it still an issue?

 

You're using Beta version, latest one (final) is 4.0.314, but still it has problematic firewall 1044 (dated Jan 21 2009). You can try playing around with test mode on/off (hit F5 -> Update->Advanced update setup) to see if it clears your problem, like it did for me https://www.wilderssecurity.com/showthread.php?t=236335 , or use v3 until ESET comes with solution. You can check all your module version (right click on Eset icon in taskbar -> about)

BR
Miki

 

ESS v3 reboots my PC. They never did figure it out and the ball seemed to get dropped. v4 doesn't do that. I'll look into what you said.

Sounds like I should download the latest version and install it although that's not the fix. It's a pain in the ass but it's not killing me right now.

 

why the hell is ESS blocking http://www.lyricsplugin.com/ ?

definitely return to V3 :-( i spent 2 days with testing and only partial succes.

 

I also want to try 1045. fell free to send it to me. ;-)

 

What happens if you whitelist that website?

Opens correctly for me.

Colin

 

whitelisted or not - same problem, after disabling FW all works ok.
ESS v4 is actually removed, im on v3.

i sent to eset few logs, few mails /they sent some tips/, from techsupp they send me also 1045...., this forum, still not satisfied with v4

good luck guys who still had some nerves and free time for testing

 

v4 and v3 use the same list, so the problem is something else.

 

what something else?

v3 installed - works
v4 installed and firewall stopped - works
v4 installed and firewall running - blocked

 

Because PM is curently off.

Marcos how shoul I get this 1045? Shoud you enable it for me?

 

Can someone send me 1045 too please?

 

I have no problem connecting to that site.. It takes a few sec, but no problem.

 

What's the status on this? I lost connection again on my ESS v4 machine on Monday, twice. Annoying!!

 

Can someone send me module 1045 too please?

 

Can someone please send me the firewall module 1045 too?

 

I have sent a PM to Marcos recently (as per his instruction in another thread) but have never received 1045. As reported by others here I doubt build 1045 didn't prove itself as a final solution and probably ESET withdrew deployment of 1045 among users.

 

We started having network connectivity problems using ESS v3 on our broadcast system/network, so i came across version 4, that i NEVER should have installed......